Skip to main content

PSE-STRATA-ASSOCIATE Real Exam Questions

Palo Alto Networks System Engineer - Strata Associate

35 questions available · Page 1 of 4

Updated Exam DumpsVerified AnswersPass Guarantee

Get Complete Exam Dumps
Question 1 Single choice

What file is needed from a firewall to generate a Security Lifecycle Review (SLR) report when creating the SLR?

  1. A

    tech support file

  2. B

    Panorama plugin registration file

  3. C

    stats dump file

  4. D

    system process core file

Show answer and explanation

Correct answer: C

Question 2 Single choice

Which traffic will be blocked when application-default service is set on a Security policy?

  1. A

    SSH traffic on TCP/22

  2. B

    HTTPS traffic on TCP/443

  3. C

    HTTP traffic on TCP/81

  4. D

    DNS traffic on UDP/53

Show answer and explanation

Correct answer: C

Question 3 Multiple choice

Which three of the following arefeatures of the Palo Alto Networks Next-Generation Firewall (NGFW) that differentiate it from a stateful inspection firewall? (Choose three.)

Select 3 Correct Responses

  1. A

    Login-ID

  2. B

    User-ID

  3. C

    App-ID

  4. D

    Network-ID

  5. E

    SSL/SSH Decrypt

Show answer and explanation

Correct answers: B, C, E

Question 4 Single choice

A customer has enabled the Threat Prevention subscription on their Palo Alto Networks Next-Generation Firewall.

How will the performance of the firewall beaffected if the customer also enables both WildFire and User- ID?

  1. A

    The maximum throughput performance will be reduced, but the impact will vary based on the firewall model being used.

  2. B

    Enabling User-ID will have no additional performance impact, but enabling WildFire will reduce throughput.

  3. C

    There will be no additional performance impact to the firewall, and throughput will remain the same, regardless of firewall model.

  4. D

    Enabling WildFire will have no additional performance impact, but enabling User-ID will reduce throughput.

Show answer and explanation

Correct answer: C

Question 5 Single choice

Which of the following is an appropriate first step for a customer interested in moving to Zero Trust?

  1. A

    Ask administrators to switch on the Zero Trust options and features of their current products.

  2. B

    Secure the funding required to incorporate the new architecture into their existing networks.

  3. C

    Set priorities by identifying the most valuable and critical assets and data on their networks.

  4. D

    Request a statement ofcompliance from their IT vendors against the Zero Trust standard.

Show answer and explanation

Correct answer: D

Question 6 Single choice

Which section of a Security Lifecycle Review (SLR) report summarizes risk exposure by breaking down a detected attack on the network?

  1. A

    Advanced URL Filtering Analysis

  2. B

    SaaSApplications

  3. C

    Threats at a Glance

  4. D

    Applications that Introduce Risk

Show answer and explanation

Correct answer: C

Question 7 Single choice

When deploying an Eval Next-Generation Firewall (NGFW) within a customer environment for the purpose of generating a Security Lifecycle Review (SLR) report, creation of which interface will not impact production traffic?

  1. A

    Layer 3 interface

  2. B

    SLR interface

  3. C

    virtual wire interface

  4. D

    TAP interface

Show answer and explanation

Correct answer: D

Question 8 Single choice

A customer interested in Panorama is concerned about managing multiple firewalls they are putting in place globally. Each location has its own IP addresses,zones, and VPN configurations.

Which element of Panorama will assist the customer in pushing this unique configuration information to the individual firewalls?

  1. A

    device profile

  2. B

    GlobalProtect

  3. C

    templates

  4. D

    device groups

Show answer and explanation

Correct answer: C

Question 9 Multiple choice

Which two of the following are benefits of the Palo AltoNetworks Zero Trust architecture? (Choose two.)

Select 2 Correct Responses

  1. A

    tighter access control

  2. B

    increased detection of threats and infiltration

  3. C

    more network segments

  4. D

    cloud-based virtual private network (VPN)

Show answer and explanation

Correct answers: A, B

Question 10 Single choice

Which subscription should be activated when a predefined, known malicious IP address is updated?

  1. A

    WildFire

  2. B

    Cortex Data Lake

  3. C

    Threat Prevention

  4. D

    URL Filtering

Show answer and explanation

Correct answer: D